A newly disclosed iOS security vulnerability has raised concerns about the safety of personal information stored on iPhones. Cryptocurrency exchange Binance has warned that malicious applications could exploit the flaw to access data belonging to other apps.
The vulnerability, called “worse_query,” reportedly affects several iOS versions, including iOS 26.7.1, 27.0.1, and 27.2.
Unlike a security issue limited to one application, this weakness involves Apple’s operating system. Consequently, the potential risks extend beyond cryptocurrency platforms.
How the iOS Security Vulnerability Works
Apple normally separates applications through a security system known as sandboxing. This protection prevents apps from accessing private information belonging to other applications.
However, the newly disclosed exploit could allow malicious software to bypass these restrictions.
As a result, attackers might access sensitive files, including cryptocurrency wallet information, private keys, recovery phrases, and login credentials.
Importantly, the warning identifies a potential security risk rather than confirming widespread attacks against iPhone users.
Apple Updates May Not Fix the Issue
Security researchers known as forcequit and 0xjohnny publicly disclosed the vulnerability in November.
Meanwhile, Apple released iOS 27.2.1 and iOS 26.7.3 on November 9, 2026.
However, the published security information for iOS 27.2.1 did not identify a fix matching the reported vulnerability.
Furthermore, forcequit claimed the flaw remained unpatched in both iOS 27.2.1 and the first developer beta of iOS 27.3.
The researchers also raised concerns about Apple’s response timeline.
According to their public statements, Apple acknowledged an earlier report but indicated that reviewing it would take longer than usual.
Binance Advises iPhone Users to Take Precautions
Following the disclosure, Binance encouraged users to remove applications obtained from untrusted sources.
These include sideloaded apps and manually signed IPA files.
Additionally, users should install official iOS and application updates as they become available.
Binance also advised customers who suspect account compromise to create a new wallet on a clean device and transfer their funds.
They should also reset active login sessions to reduce further exposure.
Security Concerns Remain Until a Fix Arrives
The disclosure highlights the importance of application isolation in protecting sensitive information.
Although Apple has not confirmed a specific patch in the supplied report, the vulnerability has attracted attention across the cryptocurrency community.
For now, iPhone users should avoid suspicious applications, maintain updated software, and monitor official security announcements.
Ultimately, a verified security fix will be essential to resolving concerns surrounding the reported exploit.
